Google Consent Mode v2

<!-- 1. First in <head>, above any Google tag -->
<script>
  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}

  // The EEA, the UK and Switzerland: denied until they choose
  gtag('consent', 'default', {
    'ad_storage': 'denied',
    'ad_user_data': 'denied',
    'ad_personalization': 'denied',
    'analytics_storage': 'denied',
    'region': [
      'AT', 'BE', 'BG', 'HR', 'CY', 'CZ', 'DK', 'EE',
      'FI', 'FR', 'DE', 'GR', 'HU', 'IE', 'IT', 'LV',
      'LT', 'LU', 'MT', 'NL', 'PL', 'PT', 'RO', 'SK',
      'SI', 'ES', 'SE', 'IS', 'LI', 'NO', 'GB', 'CH'
    ],
    'wait_for_update': 500
  });
  // Everywhere else
  gtag('consent', 'default', {
    'ad_storage': 'granted',
    'ad_user_data': 'granted',
    'ad_personalization': 'denied',
    'analytics_storage': 'granted'
  });
  gtag('set', 'ads_data_redaction', true);
</script>

<!-- 2. Then the Google tag -->
<script async src="https://www.googletagmanager.com/gtag/js?id=G-XXXXXXXXXX"></script>
<script>
  gtag('js', new Date());
  gtag('config', 'G-XXXXXXXXXX');
  gtag('config', 'AW-XXXXXXXXX');
</script>

<script>
  // 3. Call this from your cookie banner when the visitor chooses,
  //    and on every later page for a visitor who already chose.
  function sendConsent(analytics, marketing) {
    gtag('consent', 'update', {
      'ad_storage': marketing ? 'granted' : 'denied',
      'ad_user_data': marketing ? 'granted' : 'denied',
      'analytics_storage': analytics ? 'granted' : 'denied'
      // ad_personalization stays 'denied': no remarketing
    });
  }
</script>